integration-manifest.json

{
    "$schema": "https://keyfactor.github.io/v2/integration-manifest-schema.json",
    "release_dir": "SslStoreCaProxy/bin/Release",
    "name": "SSL Store AnyCA REST plugin",
    "release_project": "SslStoreCaProxy/SslStoreCaProxy.csproj",
    "description": "AnyCA Gateway REST plugin that extends SSL Store Certificate Authority Service to Keyfactor Command. SSL Store is a certificate reseller providing access to 80+ certificate products from vendors including DigiCert, Sectigo, RapidSSL, GeoTrust, and Comodo through a single API.",
    "status": "production",
    "integration_type": "anyca-plugin",
    "support_level": "kf-supported",
    "link_github": false,
    "update_catalog": false,
    "gateway_framework": "26.2",
    "about": {
        "carest": {
            "ca_plugin_config": [
                {
                    "name": "SSLStoreURL",
                    "description": "The Base URL for the SSL Store API endpoint (e.g. https://sandbox-wbapi.thesslstore.com)."
                },
                {
                    "name": "PartnerCode",
                    "description": "The Partner Code obtained from SSL Store."
                },
                {
                    "name": "AuthToken",
                    "description": "The Authentication Token obtained from SSL Store."
                },
                {
                    "name": "PageSize",
                    "description": "The number of records to return per page during synchronization."
                },
                {
                    "name": "Enabled",
                    "description": "Flag to Enable or Disable the CA connector."
                },
                {
                    "name": "RenewalWindow",
                    "description": "Number of days before order expiry to trigger a renewal instead of a reissue."
                },
                {
                    "name": "DnsValidationEnabled",
                    "description": "Enable automated DNS (CNAME) domain control validation. When enabled, the plugin requests CNAME-based validation from SSL Store and publishes the returned record via the DNS provider plugin resolved by the AnyCA Gateway. Requires a DNS provider plugin (e.g. Azure, Route53, Cloudflare) to be deployed and configured on the gateway. When disabled, email approver validation is used."
                },
                {
                    "name": "DnsVerificationServer",
                    "description": "Optional. IP address of an authoritative/internal DNS server to use when verifying record propagation. Leave empty to verify against public DNS resolvers (Google, Cloudflare, OpenDNS, Quad9)."
                },
                {
                    "name": "DnsPropagationMaxAttempts",
                    "description": "Number of times to poll DNS for the validation record before giving up during enrollment. Total wait is roughly (attempts - 1) x delay seconds. Increase this (and/or the delay) if records routinely need longer to propagate. Defaults to 3."
                },
                {
                    "name": "DnsPropagationDelaySeconds",
                    "description": "Seconds to wait between DNS propagation polling attempts during enrollment. Total wait is roughly (attempts - 1) x delay seconds. Defaults to 10. Note: enrollment blocks for this duration, so keep the combined wait reasonable — propagation is best-effort and SSL Store re-checks on its own schedule."
                },
                {
                    "name": "DcvPollTimeoutSeconds",
                    "description": "After a DNS-validated enrollment publishes its CNAME record, the plugin polls SSL Store for up to this many seconds for the certificate to be issued and, if issued in time, returns it directly from the enrollment call (like ACME). If the window expires the enrollment returns pending and the certificate is retrieved on the next CA sync. Enrollment blocks for up to this duration. Set to 0 to disable polling. Defaults to 90."
                }
            ],
            "enrollment_config": [
                {
                    "name": "Approver Email",
                    "description": "Comma-separated approver email address(es) for domain validation."
                },
                {
                    "name": "Validity Period (In Days)",
                    "description": "Certificate validity period in days (e.g. 90, 365, 730)."
                },
                {
                    "name": "Admin Contact - First Name",
                    "description": "Administrative contact first name."
                },
                {
                    "name": "Admin Contact - Last Name",
                    "description": "Administrative contact last name."
                },
                {
                    "name": "Admin Contact - Phone",
                    "description": "Administrative contact phone number."
                },
                {
                    "name": "Admin Contact - Email",
                    "description": "Administrative contact email address."
                },
                {
                    "name": "Admin Contact - Title",
                    "description": "Administrative contact job title."
                },
                {
                    "name": "Admin Contact - Organization Name",
                    "description": "Administrative contact organization name."
                },
                {
                    "name": "Admin Contact - Address",
                    "description": "Administrative contact street address."
                },
                {
                    "name": "Admin Contact - City",
                    "description": "Administrative contact city."
                },
                {
                    "name": "Admin Contact - Region",
                    "description": "Administrative contact state/province/region."
                },
                {
                    "name": "Admin Contact - Postal Code",
                    "description": "Administrative contact postal/zip code."
                },
                {
                    "name": "Admin Contact - Country",
                    "description": "Administrative contact two-letter country code (e.g. US)."
                },
                {
                    "name": "Technical Contact - First Name",
                    "description": "Technical contact first name."
                },
                {
                    "name": "Technical Contact - Last Name",
                    "description": "Technical contact last name."
                },
                {
                    "name": "Technical Contact - Phone",
                    "description": "Technical contact phone number."
                },
                {
                    "name": "Technical Contact - Email",
                    "description": "Technical contact email address."
                },
                {
                    "name": "Technical Contact - Organization Name",
                    "description": "Technical contact organization name."
                },
                {
                    "name": "Technical Contact - Address",
                    "description": "Technical contact street address."
                },
                {
                    "name": "Technical Contact - City",
                    "description": "Technical contact city."
                },
                {
                    "name": "Technical Contact - Region",
                    "description": "Technical contact state/province/region."
                },
                {
                    "name": "Technical Contact - Postal Code",
                    "description": "Technical contact postal/zip code."
                },
                {
                    "name": "Technical Contact - Country",
                    "description": "Technical contact two-letter country code (e.g. US)."
                },
                {
                    "name": "Organization Name",
                    "description": "Organization name for the certificate."
                },
                {
                    "name": "Organization Address",
                    "description": "Organization street address."
                },
                {
                    "name": "Organization City",
                    "description": "Organization city."
                },
                {
                    "name": "Organization Region",
                    "description": "Organization state/province/region."
                },
                {
                    "name": "Organization State/Province",
                    "description": "Organization state or province."
                },
                {
                    "name": "Organization Postal Code",
                    "description": "Organization postal/zip code."
                },
                {
                    "name": "Organization Country",
                    "description": "Organization two-letter country code (e.g. US)."
                },
                {
                    "name": "Organization Phone",
                    "description": "Organization phone number."
                },
                {
                    "name": "Organization Jurisdiction Country",
                    "description": "Jurisdiction country code for EV certificates."
                },
                {
                    "name": "Organization ID",
                    "description": "DigiCert organization ID for EO (Enterprise Organization) products."
                },
                {
                    "name": "Server Count",
                    "description": "Number of server licenses for the certificate."
                },
                {
                    "name": "Web Server Type",
                    "description": "Web server type (e.g. apacheopenssl, iis, tomcat, Other)."
                },
                {
                    "name": "Signature Hash Algorithm",
                    "description": "Signature hash algorithm (PREFER_SHA2, REQUIRE_SHA2, PREFER_SHA1)."
                },
                {
                    "name": "File Auth Domain Validation",
                    "description": "Use file-based domain validation (True/False)."
                },
                {
                    "name": "CName Auth Domain Validation",
                    "description": "Use CNAME-based domain validation (True/False)."
                },
                {
                    "name": "Is CU Order?",
                    "description": "Is this a CU (Customer) order (True/False)."
                },
                {
                    "name": "Is Renewal Order?",
                    "description": "Is this a renewal order (True/False)."
                },
                {
                    "name": "Is Trial Order?",
                    "description": "Is this a trial order (True/False)."
                }
            ],
            "product_ids": [
                "comododvucc",
                "comodoevcsc",
                "comodoevmdc",
                "comodoevssl",
                "comodomdc",
                "comodomdcwildcard",
                "comodopciscan",
                "comodossl",
                "comodoucc",
                "comodouccwildcard",
                "comodowildcard",
                "digi_client_premium",
                "digi_csc",
                "digi_csc_ev",
                "digi_doc_signing_ind_2000",
                "digi_doc_signing_ind_500",
                "digi_doc_signing_org_2000",
                "digi_doc_signing_org_5000",
                "elitessl",
                "enterprisessl",
                "essentialssl",
                "essentialwildcard",
                "hackerprooftm",
                "hgpcicontrolscan",
                "pacbasic",
                "pacpro",
                "pacenterprise",
                "comodocsc",
                "digi_quickssl_md",
                "digi_securesite_ev_flex-EO",
                "digi_securesite_flex-EO",
                "digi_securesite_pro_ev_flex-EO",
                "digi_securesite_pro_flex",
                "digi_securesite_pro_flex-EO",
                "digi_ssl_basic-EO",
                "digi_ssl_ev_basic-EO",
                "digi_sslwebserver_ev_flex-EO",
                "digi_sslwebserver_flex-EO",
                "digi_truebizid_ev_flex-EO",
                "digi_truebizid_flex-EO",
                "comodopremiumssl",
                "comodopremiumwildcard",
                "enterpriseprowc",
                "instantssl",
                "instantsslpro",
                "sectigoovssl",
                "sectigoovwildcard",
                "digi_securesite_flex",
                "digi_ssl_basic",
                "digi_sslwebserver_flex",
                "digi_truebizid_flex",
                "positivessl",
                "positivesslwildcard",
                "sectigoevssl",
                "sectigossl",
                "sectigowildcard",
                "digi_securesite_ev_flex",
                "digi_ssl_ev_basic",
                "digi_sslwebserver_ev_flex",
                "digi_truebizid_ev_flex",
                "digi_securesite_pro_ev_flex",
                "positivemdcssl",
                "positivemdcwildcard",
                "sectigodvucc",
                "sectigouccwildcard",
                "digi_rapidssl",
                "digi_rapidssl_wc",
                "digi_ssl_dv_geotrust_flex",
                "digi_ssl123_flex",
                "enterpriseproev",
                "positiveevssl",
                "positiveevmdc",
                "sectigoevmdc",
                "enterpriseproevmdc",
                "sectigomdc",
                "sectigomdcwildcard",
                "enterprisepro"
            ]
        }
    }
}